Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B896B122CDB911EFA194EF51762E951A.roa
File: B896B122CDB911EFA194EF51762E951A.roa (raw, json)
Hash identifier: Va75tvEYMkGWrxO3zI9mRepxsXSB7NDSbqDItYSbSUU=
Subject key identifier: EB:72:24:5E:83:1A:B3:03:56:0C:19:DC:6C:64:9E:79:45:73:94:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0136D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B896B122CDB911EFA194EF51762E951A.roa
Signing time: Wed 08 Jan 2025 12:11:42 +0000
ROA not before: Wed 08 Jan 2025 12:11:38 +0000
ROA not after: Tue 16 Dec 2025 12:11:38 +0000
asID: 984
IP address blocks: 154.200.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79572 (0x136d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 12:11:38 2025 GMT
Not After : Dec 16 12:11:38 2025 GMT
Subject: CN=677e6b7e-50e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:8f:4f:63:0e:cd:4c:5f:15:d1:c8:e0:db:
34:5f:a1:57:e7:86:ee:b2:11:4a:ab:ff:f9:c6:db:
3c:2f:31:a2:f0:29:df:c7:08:e1:7e:e6:51:9c:81:
2c:4c:26:fb:3c:dc:93:96:aa:d8:0f:e3:92:38:93:
ad:79:a8:f5:f1:b9:58:a8:18:d2:2a:b0:80:01:0f:
94:91:2e:b9:33:3b:df:b6:7d:18:70:b8:c7:7a:d6:
1d:1e:5d:b5:b0:f4:7b:d7:fb:e8:5e:84:05:51:34:
95:3d:a8:c3:13:9d:a8:16:2e:f9:77:e3:5a:5b:ba:
06:1d:08:da:e5:af:3b:d8:93:57:78:d4:f0:ce:7b:
0d:ab:14:bc:8f:0f:c2:be:e1:ad:50:8e:e9:21:78:
e5:8c:cb:97:3d:e6:90:52:d9:c5:db:09:5c:a0:86:
c1:71:1b:ae:99:b8:6c:44:b0:7b:8e:3b:a5:cb:17:
a1:3d:8d:dc:0d:2b:bd:da:75:0a:16:59:98:f6:eb:
8e:d3:73:a9:d2:62:66:d6:05:f6:f6:50:3f:3d:8d:
21:d5:c9:19:ef:31:d7:86:d1:67:14:89:d5:28:c7:
8a:52:20:68:5c:db:0d:9b:9a:83:30:70:9a:8f:68:
87:be:a1:05:75:06:9a:19:57:91:f7:85:de:92:08:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:72:24:5E:83:1A:B3:03:56:0C:19:DC:6C:64:9E:79:45:73:94:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B896B122CDB911EFA194EF51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.179.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:4c:bc:a6:67:e2:96:4c:22:a0:e7:28:a3:9b:e3:12:bd:d1:
c4:f9:d3:66:b0:83:1c:ce:85:f3:c6:a4:ca:91:13:b2:77:c2:
59:4d:ed:f7:a4:fa:39:42:26:f0:dc:53:64:3f:75:89:4c:46:
79:c1:b8:5e:4f:53:f3:69:6b:d0:85:5c:c0:7c:47:e0:e2:f1:
6a:90:72:d9:c3:00:91:a3:46:3a:0b:5c:57:56:34:c6:d3:b1:
86:f8:85:0c:b0:51:e8:f7:20:68:7b:91:0a:98:e8:0e:df:48:
5a:40:9b:83:30:b0:f9:ac:97:32:7c:6b:91:be:8b:d3:a2:d2:
a9:9e:32:5e:0b:44:b1:b1:80:70:7b:33:2b:fc:b1:eb:50:1a:
d4:d5:e2:0c:6a:c4:b8:b0:a3:4b:8c:fc:da:41:45:38:54:0f:
90:b3:ac:d9:9f:3f:ad:f1:eb:78:d2:58:95:98:44:9c:a6:74:
63:bf:f6:16:cf:28:76:58:b0:87:08:c0:ed:20:fe:56:88:fa:
12:29:bb:59:0e:09:fe:44:96:58:e5:6a:19:e0:de:92:08:c6:
d3:47:cc:4d:47:5b:df:fd:ce:ff:3c:a0:90:9d:11:97:27:1d:
1a:c9:ec:3d:98:17:a6:8b:03:27:4d:40:f3:9d:4c:03:96:e5:
05:10:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:53 2025 by rpki-client